In Wireshark, what is the purpose of a display filter?

To change the capture interface

To limit which packets are captured to disk

To hide captured packets that do not match the filter

When analyzing a packet capture, which pattern indicates a possible TCP retransmission issue?

A single FIN packet closing a connection

Multiple SYN packets to the same destination

Duplicate ACK numbers and retransmitted segments

ICMP echo requests without replies

Which type of packet in a capture might indicate a network loop or broadcast storm?

A large number of broadcast frames

A network engineer needs to capture traffic between two servers in different VLANs on the same switch to troubleshoot an application performance issue. The engineer wants to minimize impact on the production traffic and capture only the relevant packets. What should the engineer do?

Use tcpdump on the application servers to capture traffic on their network interfaces.

Configure a SPAN session on the switch to monitor the VLANs and apply a filter for the application's port.

Configure an ERSPAN session to send the traffic to a remote analyzer and apply a capture filter for the application's IP addresses.

Configure a SPAN session on the switch to monitor both source and destination ports and apply a filter for the application's port.

CCIE Enterprise Infrastructure

Domain 4Objective 7

Network Operations CCIE-ENTERPRISE-INFRASTRUCTURE Practice Questions (Page 3)

Part of the Infrastructure Security and Services domain, which accounts for 15% of the CCIE-ENTERPRISE-INFRASTRUCTURE exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–2 from this objective — we provide 53 practice questions to prepare you well beyond it. (estimate)

53questions here

11free pages

7concepts

15%of the exam

Questions 11–15

11foundation · easy
In Wireshark, what is the purpose of a display filter?
Select an answer first
12foundation · easy
When analyzing a packet capture, which pattern indicates a possible TCP retransmission issue?
Select an answer first
13foundation · easy
Which type of packet in a capture might indicate a network loop or broadcast storm?
Select an answer first
14foundation · easy
Which tool is used to test the reachability of a host and measure round-trip time?
Select an answer first
15application · medium
A network engineer needs to capture traffic between two servers in different VLANs on the same switch to troubleshoot an application performance issue. The engineer wants to minimize impact on the production traffic and capture only the relevant packets. What should the engineer do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCIE-ENTERPRISE-INFRASTRUCTURE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-ENTERPRISE-INFRASTRUCTURE” is a trademark of its owner, used for identification only.